Start
Static task
static1
Behavioral task
behavioral1
Sample
504b8e9aa6dc62e96e19bacb1d04758e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
504b8e9aa6dc62e96e19bacb1d04758e.dll
Resource
win10v2004-20231222-en
General
-
Target
504b8e9aa6dc62e96e19bacb1d04758e
-
Size
12KB
-
MD5
504b8e9aa6dc62e96e19bacb1d04758e
-
SHA1
716b89da634ae35a87c181169ced3e2001664dec
-
SHA256
2465b5f03e23637ab99e6d5435f3855e73d7e4fe29563d101b6060fdf6a06f56
-
SHA512
e6b58f1825d3759538186c7f5f83fc21cf0c2959ba1a2f6b0209767604591cb8d182b3dd1619e9feac3300eb9c02c6b90bc3be7ed48194b26acb4c4208810ece
-
SSDEEP
384:uVE3wE9Q7AJtMusBdK02h7B9ZiS6kYbNts6o:R3wEuAJtBsBdmh7B976bNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 504b8e9aa6dc62e96e19bacb1d04758e
Files
-
504b8e9aa6dc62e96e19bacb1d04758e.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE